Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/DWINS/0/323430353a346430303a3a2f33322d3438203d3e203137343136.roa
File: 323430353a346430303a3a2f33322d3438203d3e203137343136.roa (raw, json)
Hash identifier: iWtECRpcS2tiVOqsLI6rlO0uvEa9pxsE3Sqh+gwayqA=
Subject key identifier: 32:79:2A:1E:8A:F5:23:E2:1F:C5:4F:0D:0C:DE:2D:E8:CB:6E:62:1B
Certificate issuer: /CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Certificate serial: 6460419837B193FB9FC13F721367EB58E177FDFE
Authority key identifier: C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DWINS/0/323430353a346430303a3a2f33322d3438203d3e203137343136.roa
Signing time: Mon 11 May 2026 17:06:31 +0000
ROA not before: Mon 11 May 2026 17:01:31 +0000
ROA not after: Mon 10 May 2027 17:06:31 +0000
asID: 17416
IP address blocks: 2405:4d00::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:60:41:98:37:b1:93:fb:9f:c1:3f:72:13:67:eb:58:e1:77:fd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Validity
Not Before: May 11 17:01:31 2026 GMT
Not After : May 10 17:06:31 2027 GMT
Subject: CN=32792A1E8AF523E21FC54F0D0CDE2DE8CB6E621B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:ee:f4:7c:91:52:f2:fa:03:b8:e6:f2:4b:
fd:89:c4:bb:78:61:32:5f:40:1f:e7:42:d0:24:ee:
02:e0:36:56:c0:16:3f:01:17:d9:02:1c:0d:76:26:
cc:2c:75:d0:9b:49:53:45:f5:a6:d7:ed:9a:95:f5:
52:4a:22:91:b7:b4:6a:ba:0d:26:5a:c7:92:7f:76:
83:d6:64:f9:f4:a6:05:a8:c2:7b:96:6f:09:db:e6:
2a:6a:5e:39:a7:87:8f:16:50:69:88:0d:d1:f4:80:
7c:e5:43:00:a9:e4:94:5d:d7:f9:7e:d9:e9:eb:f1:
7e:01:47:28:16:4c:f8:4e:72:21:81:22:ef:6b:95:
46:dd:59:77:df:6b:de:84:b9:fa:fb:64:eb:97:72:
7b:32:90:70:b9:b0:ba:2c:e0:de:11:4e:03:17:a8:
b4:6a:e7:1b:f6:39:dc:fd:c0:c5:bc:74:c6:78:89:
ff:24:5c:1a:fe:2e:50:5f:6f:3c:d8:5a:b6:47:99:
1a:95:36:bf:29:a4:c6:de:79:11:ec:6f:39:bb:05:
6f:24:78:d3:29:95:7b:61:11:6e:b2:49:3d:46:17:
8c:e6:43:95:e1:93:6a:71:20:4a:83:8c:51:41:9a:
4b:b3:b0:bf:9e:8f:b7:de:b5:ad:6b:3d:d2:f2:de:
8e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:79:2A:1E:8A:F5:23:E2:1F:C5:4F:0D:0C:DE:2D:E8:CB:6E:62:1B
X509v3 Authority Key Identifier:
keyid:C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/323430353a346430303a3a2f33322d3438203d3e203137343136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:4d00::/32
Signature Algorithm: sha256WithRSAEncryption
84:37:93:84:67:63:4a:12:4d:95:b1:fc:40:eb:a4:bf:54:31:
4e:b0:90:11:11:4e:7c:f3:1a:a6:5f:a2:15:62:4b:a5:3a:f6:
69:99:39:71:6d:9f:5d:04:c1:d4:47:65:b8:61:e6:6c:43:9d:
d1:83:9f:e1:36:45:26:d9:62:e3:08:2d:a9:c1:c0:e2:70:42:
e2:8f:db:19:b9:e0:4e:60:d2:c9:ff:b1:3d:d0:0d:07:67:d5:
47:79:11:b5:d2:73:17:72:36:ba:f6:cb:fb:be:ba:77:2c:bb:
8e:e0:32:a7:86:8a:43:fd:d3:79:a5:c6:b8:45:c6:63:fc:2b:
05:ef:8b:8e:9c:17:cb:ce:f3:35:ee:9b:90:b2:61:96:a1:c7:
88:c4:80:83:3f:27:74:b6:b6:b0:3b:16:b7:0b:02:01:a7:aa:
c4:58:01:06:60:0c:42:21:3f:19:a8:da:2c:1a:89:ae:0e:4b:
90:a9:7d:03:c5:d7:59:e6:5f:1a:f3:30:3f:ef:41:3e:d5:15:
29:85:fe:fc:8a:3f:b7:05:3c:e1:24:10:49:ef:41:13:52:41:
64:d1:b8:c3:fc:9c:9e:ce:45:47:a5:f5:f5:8e:be:c5:d6:d3:
0c:dd:10:92:0f:89:b1:35:41:64:8a:45:0a:3d:62:61:da:3d:
f5:09:d1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:35 2026 by rpki-client